On a server's authorized_keys
file, an ssh key is preceded by a specific command to prevent users to run any other command:
command="/bin/restricted_shell" ssh-rsa AAA....
It is often recommended to add the no-X11-forwarding
restriction when using command.
As the restriction is not present - and X11Forwarding
is allowed - is it possible to execute for instance an xterm
session instead of the restricted command?